Mark Zuckerberg Tells Senate: Election Security Is an 'Arms Race'

Mark Zuckerberg faced dozens of senators — and the American television audience — to take "hard questions" on how Facebook has handled user data and faced efforts to subvert democracy.

"We didn't take a broad enough view of our responsibility, and that was a big mistake. It was my mistake, and I'm sorry," the co-founder and CEO of Facebook, uncharacteristically wearing a suit, said in his opening remarks.

"I started Facebook, I run it, and I'm responsible for what happens here."

Zuckerberg testified Tuesday before a joint session of the Senate Commerce and Judiciary committees. He spoke for more than four hours.

You can watch the archived video here:

We've updated this post with highlights from the proceedings.

The leaders of the committees, in their opening remarks, signaled that the status quo was not satisfactory and called for changes — voluntary or mandatory — to promote transparency and prevent abuse.

Sen. John Thune, chairman of the Commerce committee, said the days of deferring to tech companies on questions of regulation may be ending — and that in his testimony, Zuckerberg has the opportunity to speak to supporters and to skeptics.

"We are listening," Commerce chairman John Thune told Zuckerberg in his opening statement. "America is listening. And, quite possibly, the world is listening, too."

"If you and other social media companies do not get your act in order, none of us are going to have any privacy anymore," Sen. Bill Nelson, ranking member of the commerce committee, said bluntly.

The remarkable hearing was a bit of a spectacle, at least by Senate committee hearing standards. It was also Zuckerberg's first appearance before Congress. He will also be testifying before the House Energy and Commerce committee on Wednesday.

Facebook is reeling from the Cambridge Analytica scandal, after news publicly broke that millions of Facebook users' data had been improperly shared with a data analytics firm that worked with the Trump campaign. The Federal Trade Commission has confirmed it is investigating how user privacy has been handled at Facebook.

On Tuesday, the company began informing users who were affected. You can check this page on Facebook's help site to see if you're among that number.

Nelson, a Florida Democrat, asked Zuckerberg why Facebook didn't inform users back in 2015, when it first discovered that data had been sold to Cambridge Analytica.

"When we heard back from Cambridge Analytica that they had told us that they weren't using the data and deleted it, we considered it a closed case," Zuckerberg said. "In retrospect, that was clearly a mistake. We shouldn't have taken their word for it."

Facebook did not inform the FTC of the improper data sharing, Zuckerberg said.

Facebook has blamed Aleksandr Kogan, the researcher who gathered user data and sold it to Cambridge Analytica, for violating Facebook's terms of service. But Richard Blumenthal, D-Conn., showed Zuckerberg the text of an agreement he said Kogan sent to Facebook when he set up his app. It claimed the right to "edit, copy, disseminate, publish, transfer, append or merge with other databases, sell, license ... and archive" data. Zuckerberg said he had not seen that text. He said that Facebook's app review team would have been responsible for that agreement and that nobody from that team has been fired over this scandal.

Zuckerberg agreed that "victims" was an appropriate word for the millions of users whose data was shared. "They did not want their information to be sold to Cambridge Analytica by a developer, and that happened, and it happened on our watch," he said. "Even though we didn't do it, I think we do have a responsibility to be able to prevent it."

But he denied that the data sharing violated Facebook's 2011 consent decree with the FTC.

Under the terms of that decree, Facebook is required to "obtain users' affirmative consent" before sharing their data. Most of the people affected by the Cambridge Analytica scandal did not opt in to Kogan's app, which collected that data; their data was scraped after a friend opted in. But Zuckerberg argued that the decree was not violated because the "Facebook Platform," which was set up to allow third-party developers to use Facebook data, allowed that practice.

"I believe that we rolled out this developer platform and that we explained to people how it worked and that they did consent to it," he said.

Zuckerberg is also being grilled on a wide range of other topics. Lawmakers are keenly interested in how Facebook handled — or mishandled — Russian election interference during the 2016 campaigns, how the platform plans to monitor and disclose who is responsible for ads, and how Facebook plans to prevent hate speech or discriminatory ads.

Topics Zuckerberg has addressed so far include:

• Informing users about how their data is used: "Long privacy policies are very confusing," Zuckerberg said. "If you make it long and spell out all the detail, then you're probably going to reduce the percent of people who read it."
• Why this apology is different from previous apologies from Facebook: "Overall I would say that we're going through a broader philosophical shift in how we approach our responsibility as a company," he said. "We need to take a more proactive role and a broader view of our responsibilities. It's not enough to just build tools. We need to make sure they're used for good. That means we need to now take a more active view in policing the ecosystem."
• Policing harmful language: Zuckerberg noted that Facebook has had success using artificial intelligence tools to police and enforce communication by blocking terrorist propaganda, but he said it's more difficult to identify hate speech. "Determining if something is hate speech is very linguistically nuanced," he said, and the error rate is high. But he said repeatedly that better AI tools are being developed.
• Election security: "There are people in Russia whose job it is to try to exploit our systems and other internet systems," he said. "So this is an arms race. They're going to keep getting better at this, and we need to invest in keeping on getting better at this, too." He repeated the point again hours later. "As long as there are people sitting in Russia whose job it is to try to interfere with elections around the world, this is going to be an ongoing conflict," he said.
• Working with Justice Department special counsel Robert Mueller on the Russia investigation: "I want to be careful here because that, our work with the special counsel, is confidential and I want to make sure that in an open session I'm not revealing something that's confidential," he said. " ... I am not aware of a subpoena, I believe there may be [a subpoena], but I know we are working with them."
• Whether Facebook is a monopoly: Sen. Lindsey Graham, R-S.C., pushed Zuckerberg on whether the platform has any true competition, asking whether there is "an alternative to Facebook in the private sector." Zuckerberg maintained that Facebook offers a variety of services and has competition within different "categories," to which Graham asked, "You don't think you have a monopoly?" "It certainly doesn't feel like that to me," Zuckerberg said, to chuckles from the audience.
• On whether Facebook is a "neutral public forum": Sen. Ted Cruz, R-Texas, pushed Zuckerberg on this. "The predicate for Section 230 immunity is that you are a neutral public forum," he said. "Do you consider yourself a neutral public forum or are you engaged in political speech?" (Under Section 230, online platforms can't be sued for something posted by a user.) Cruz cited allegations of censorship and suppression of conservative speech on the platform. In response, Zuckerberg said, "We consider ourselves to be a platform for all ideas ... Our goal is certainly not to engage in political speech." But, he said, there are "a number of things that we would all agree are clearly bad," which should be removed from the platform.
• Transparency in political ads: Facebook recently began requiring location verification for groups purchasing political or issue ads on Facebook. Sen Sheldon Whitehouse, D-R.I., asked whether shell corporations could be used to get around that system. "If they were running through a corporation domiciled in Delaware, you wouldn't know that they were actually a Russian owner," Whitehouse said. "Senator, that's — that's correct," Zuckerberg said.
• Who's responsible for identifying violations: Sen. Chris Coons, D-Del., asked why Facebook puts the burden on users to flag content that needs to be taken down. Zuckerberg cited the "sheer volume" of material on Facebook and said new hires and AI tools will help improve the process over time. "We can't wait five years for Facebook to get rid of housing discrimination content," Coons said, referring to allegations that the site lets housing and rental companies restrict who can see their ads, by excluding, for example, certain races.

Zuckerberg said he didn't know the answer to several questions or that he'd have to check with his team, including whether Facebook employees worked directly with Cambridge Analytica and whether Facebook tracks users' activity across devices while they are offline.

Facebook has lost about $100 billion in value since February. As Zuckerberg testified on Tuesday, Facebook stock was up about 4 percent for the day.

In Zuckerberg's prepared testimony — a longer version of his opening comments — he embraced a wider responsibility for user content than Facebook has claimed in the past. He also laid out efforts that he said will help protect users' information and defend against "bad actors" on the platform.

Regulation came up repeatedly in this hearing. Some lawmakers are pushing to establish rules for how internet companies handle ads or user data. And Facebook has signaled that it might be open to some regulation, although the company also argues it is not waiting for laws to be passed to change its own behavior.

But, of course, lawmakers are divided on the question of regulation. Some senators from both sides of the aisle warned that Congress would step in if Facebook can't improve security. But Sens. Orrin Hatch, R-Utah, and Roger Wicker, R-Miss., cautioned against overregulation in response to the scandal.

In addition to a split over regulation, senators were divided in their responses to Facebook's new, broader understanding of its responsibility for user content.

Here's what Zuckerberg said in his testimony:

"It's not enough to just connect people, we have to make sure those connections are positive. It's not enough to just give people a voice, we have to make sure people aren't using it to hurt people or spread misinformation. It's not enough to give people control of their information, we have to make sure developers they've given it to are protecting it too. Across the board, we have a responsibility to not just build tools, but to make sure those tools are used for good."

Some senators asked questions about how, exactly, Facebook plans to be more proactive on this issue, while embracing the idea that Facebook will be accountable for harmful content.

But others — like Sen. Ben Sasse, R-Neb. — sounded a note of caution about the idea of Facebook deciding what's "positive" and what's not.

Sasse asked Zuckerberg to define hate speech and asked about a hypothetical future where "pro-lifers are prohibited about voicing their views" on Facebook.

"I wouldn't want you to leave here and think there's a unified view of the Congress that you should be moving toward policing more speech," he said.

This post has been updated.